ISO 26262-8 clause 5 allocates responsibilities in distributed developments; a semiconductor developer that is a supplier is subject to it and its customer (a Tier 1 or semiconductor integrator) manages it as a supplier, with the development interface agreement and the supplier's safety plan among the work products the developer executes; the chip developer may in turn buy from internal or external suppliers, responsible for managing them, whose clause 5 work products (development interface agreement, supplier selection report, functional safety assessment report) become part of the developer's safety argument; the bottom of the safety-relevant supply chain is the point where safety responsibility stops, lower-level suppliers such as material suppliers being subject to quality requirements outside the standard.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.